45x

QVM360

Hibike 发表于 2024-9-7 20:41
混有白(灰)样本？

质量没我的众测包高

Loyisa

毛豆 9X

xmt12

QVM360 发表于 2024-9-7 21:20
质量没我的众测包高

肯定啊

Fadouse

Kaspersky(仅运行) + ElasticDefend Kill 38/45 ~= 84.4%
静态 29x


静态剩余16x:



双击 5f01f481065fefdf0c34c7f1e0a5dd527857962dae46bcbddb4a2b941bf5a3dc.msi ->

1. Event: Process terminated
   
2. Application: Windows® installer
   
3. User: LAPTOP\fadou
   
4. User type: Initiator
   
5. Component: System Watcher
   
6. Result description: Terminated
   
7. Type: Trojan
   
8. Name: PDM:Trojan.Win32.Bazon.a
   
9. Threat level: High
   
10. Object type: Process
    
11. Object path: C:\Windows\System32
    
12. Object name: msiexec.exe
    
13. MD5: F40E16F6575DB66CCA4F23A0AA4A0668

复制代码

双击 83c9a8504decec28bc73c3f7130d5aeffe64d2b21982f4afb234ec1f4f51dcd1.msi ->

1. Event: Malicious object detected
   
2. Component: Intrusion Prevention
   
3. Result description: Detected
   
4. Type: Trojan
   
5. Name: HEUR:Trojan-PSW.OLE2.Stealer.gen
   
6. Threat level: High
   
7. Object path: E:\Code\Virus\45x
   
8. Object name: 83c9a8504decec28bc73c3f7130d5aeffe64d2b21982f4afb234ec1f4f51dcd1.msi
   
9. Reason: Machine learning
   
10. Databases release date: Today, 9/7/2024 11:23:00 AM
    
11. MD5: 4EC074C0E895D7B60D4518A25681C1F5

复制代码

双击 413af64238d7985f1749cb5903bac8e17a58d37408488992d40247b42fcffbc7.exe ->

双击 735c61d3e1c75c73089fc122a13ae7b2bcf3f9ec78f4284a0c66c10d1ab6428b.exe -> 自退
双击 773ffb5023a8d10371ce984817e20df33cda24df19ea5e78c85526d8e683a554.exe -> 无行为
双击 785deafcc1d0583db41670ccc05d8dbd177c6e2a2f014b02f88a9dd86076b5f2.exe ->
双击 14528cd6c6808ee2cd72641e47d078e4d321265dfc5b78788561a226fd6dff41.exe ->

双击 b167075dd12be9994901790ee5f670200970810c47b7477c3115b74a060dc77b.msi ->

双击 c3b7f840b3f230c983bc9df82b7b1ffe7856b0bad47f567f1d0b90e916121a38.exe ->

双击 d2f2f42803892b5b02e9cb790fc28729ccde154e7be051d48ff6143625181439.exe -> 无行为
双击 f5d79d5b1663acb39703a9558c4d0a895aaa2f7419c42d8f98b032ca28a47603.exe ->

双击 f74eef2f7eec0b034f5fb97fbe872ff7bac0fca4400c0782d64446f1ef69a483.exe -> 无行为
双击 f497419dfdcbcd939d73ac2ad34528121aaa8672411703f94350adfcc67d7639.exe ->

双击 fbf754824a852b914210894283163a873032b577f7346fe4d45baef1e2955048.exe -> 无行为
剩余sys和dll无法测试

测试仅代表个人电脑环境，不具备参考价值

123456aaaafsdeg

z614606517

btf

btbtg

btbtg

btbtg

OrangeCell

QVM360 发表于 2024-9-7 21:20
质量没我的众测包高

哪时候再发一期,咕咕好久了